Overview
overview
4Static
static
3imager_1.8.5.exe
windows7-x64
4imager_1.8.5.exe
windows10-2004-x64
4QtGraphica...dow.js
windows7-x64
3QtGraphica...dow.js
windows10-2004-x64
3QtGraphica...lur.js
windows7-x64
3QtGraphica...lur.js
windows10-2004-x64
3QtGraphica...te.dll
windows7-x64
3QtGraphica...te.dll
windows10-2004-x64
3QtGraphica...in.dll
windows7-x64
3QtGraphica...in.dll
windows10-2004-x64
3QtQuick.2/...in.dll
windows7-x64
3QtQuick.2/...in.dll
windows10-2004-x64
3QtQuick/Co...in.dll
windows7-x64
3QtQuick/Co...in.dll
windows10-2004-x64
3QtQuick/Co...low.js
windows7-x64
3QtQuick/Co...low.js
windows10-2004-x64
3QtQuick/Co...in.dll
windows7-x64
3QtQuick/Co...in.dll
windows10-2004-x64
3QtQuick/Co...in.dll
windows7-x64
3QtQuick/Co...in.dll
windows10-2004-x64
3QtQuick/La...in.dll
windows7-x64
3QtQuick/La...in.dll
windows10-2004-x64
3QtQuick/Te...in.dll
windows7-x64
3QtQuick/Te...in.dll
windows10-2004-x64
3QtQuick/Wi...in.dll
windows7-x64
3QtQuick/Wi...in.dll
windows10-2004-x64
3bearer/qge...er.dll
windows7-x64
3bearer/qge...er.dll
windows10-2004-x64
3fat32format.exe
windows7-x64
1fat32format.exe
windows10-2004-x64
3iconengine...on.dll
windows7-x64
3iconengine...on.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2024, 13:40
Static task
static1
Behavioral task
behavioral1
Sample
imager_1.8.5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
imager_1.8.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
QtGraphicalEffects/private/FastInnerShadow.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
QtGraphicalEffects/private/FastInnerShadow.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
QtGraphicalEffects/private/GaussianDirectionalBlur.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
QtGraphicalEffects/private/GaussianDirectionalBlur.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
QtGraphicalEffects/private/qtgraphicaleffectsprivate.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
QtGraphicalEffects/private/qtgraphicaleffectsprivate.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
QtGraphicalEffects/qtgraphicaleffectsplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
QtGraphicalEffects/qtgraphicaleffectsplugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
QtQuick.2/qtquick2plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
QtQuick.2/qtquick2plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
QtQuick/Controls.2/Fusion/qtquickcontrols2fusionstyleplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
QtQuick/Controls.2/Fusion/qtquickcontrols2fusionstyleplugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
QtQuick/Controls.2/Material/RectangularGlow.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
QtQuick/Controls.2/Material/RectangularGlow.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
QtQuick/Controls.2/Material/qtquickcontrols2materialstyleplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
QtQuick/Controls.2/Material/qtquickcontrols2materialstyleplugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
QtQuick/Controls.2/qtquickcontrols2plugin.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
QtQuick/Controls.2/qtquickcontrols2plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
QtQuick/Layouts/qquicklayoutsplugin.dll
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
QtQuick/Layouts/qquicklayoutsplugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
QtQuick/Templates.2/qtquicktemplates2plugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
QtQuick/Templates.2/qtquicktemplates2plugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
QtQuick/Window.2/windowplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
QtQuick/Window.2/windowplugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
bearer/qgenericbearer.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
bearer/qgenericbearer.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
fat32format.exe
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
fat32format.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
iconengines/qsvgicon.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
iconengines/qsvgicon.dll
Resource
win10v2004-20240910-en
General
-
Target
QtGraphicalEffects/private/qtgraphicaleffectsprivate.dll
-
Size
163KB
-
MD5
6f2896c1741577d4141940669bb78168
-
SHA1
a2ede8c40d7584607f5ea51a3044c6d3397228d0
-
SHA256
e1152e7c0fe2cc14c9c27c15aa3ae10a6eebe801f07a0fa3de36a41e6e2080c5
-
SHA512
48344051f777e4f04f8186d892a476ec2c6cb6119aeb2ffeda8059d771b2b63201a7ffe8380d389f0cbb517ee9c440abf36e623e2dd928ad0dc6d27bcd168a40
-
SSDEEP
3072:h9jA2PmZTN7+6oUExd0jIq+yauht5R/Bv3H2sgO56UYrp4YUGcyEbHaiW+mbeLcN:h9EumZTZ+TxdKIq+yRz/Bv3H2sgO56UM
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1380 wrote to memory of 3736 1380 rundll32.exe 81 PID 1380 wrote to memory of 3736 1380 rundll32.exe 81 PID 1380 wrote to memory of 3736 1380 rundll32.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1380 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:3736
-